Phone Lines icon GFI Support

Articles in this section

See more

Exinda CLI: Applications

Author: Sughra Mehdi Updated

Overview

 

This article provides information regarding the Exinda CLI command application. 

You can use the application command to create a new application definition.

 

Information

 

NOTE:  The following syntax convention is used:
  • {}: Options are enclosed in braces and are separated by '|'
  • []: Optional keywords are enclosed in brackets
  • <>: User input is required where variables are enclosed in greater-than and less-than symbols

 

The following table describes the commands used for performing common actions related to application:

 

 Action Description

 Command  Parameter Description 

To create an application by network object or to remove the network object from the application definition

 [no] application <application name> network-object <network-object-name> network-object <network_object_name> - Define the application by network object.
To create an application by port number and protocol (or to remove the port number and protocol from the application definition) [no] application <application-name> [network-object <network-object-name>] port <port number> protocol {protocol}
  • port <port-number> - Define the application by a particular port number.
  • protocol {protocol} - Define the application by protocol. e.g. 6in4, ah, egp, esp, ggp, gre, icmp, icmpv6, igmp, igp, ip, ipencap, ipip, ospf, pup, sctp, st, tcp, udp, vrrp
  • network-object <network-object-name> - Can be optionally specified.
To create an application by port range and protocol (or to remove the port range and protocol from the application definition

[no] application <application-name> [network-object <network-object-name>] portrange <port_number_low> <port_number_high> protocol {protocol}

 network-object <network-object-name> - Can be optionally specified.

To create an application by only specifying a protocol (or to remove the protocol only setting from the application definition)

 [no] application <application-name> protocol-only {protocol} NA (Not Applicable) 
To create an application using an L7 application signature (or to remove the L7 signature from the application definition) [no] application <application-name> signature <l7_signature> [signature_options]
  • signature <l7_signature> - Specify a L7 signature that the appliance can recognize. Type application <application-name> signature ? to get a list of L7 signatures that the appliance can recognize.
  • [signature_options] - Some of the L7 signatures have optional settings.

To remove all configuration for a specified application

 application <application name> clear NA (Not Applicable) 

To remove an application

 no application <application-name> NA (Not Applicable) 

To view an application's definition

show application <application-name>

 NA (Not Applicable) 

 

Example

Define an application called FTP that uses TCP ports 20 and 21 with the L7 signature, ftp.

application FTP portrange 20 21 protocol tcp 
application FTP signature ftp

 

Find more CLI commands.

Back to Top